Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

EL-DORADO · Threat actor profile

// THREAT ACTOR

EL-DORADO_

Dormant

EL-DORADO is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of EL-DORADO — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

118 Victims tracked
0 / 7 Active mirrors
2024-06-06 First listing
2025-07-02 Most recent

Victims by year

  • 2025 26
  • 2024 92

Leak site mirrors

7 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • dataleakypypu7uwblm5kttv726l3iripago6p336xjnbstkjwrlnlid.onion DragonForce | Oops... snapshot · 2025-03-28 19:03
  • panelqbinglxczi2gqkwderfvgq6bcv5cbjwxrksjtvr5xv7ozh5wqad.onion snapshot · 2025-12-07 03:07
  • panelqbinglxczi2gqkwderfvgq6bcv5cbjwxrksjtvr5xv7ozh5wqad.onion snapshot · 2025-12-07 03:01
  • panela3eefdzfzxzxcshfnbustdprtlhlbe3x2fqomdz7t33iqtzvjyd.onion snapshot · 2025-02-16 23:30
  • 26ubgm3vvrjawkdyfhvl2d2nhq77nu3zsagbih4yy2zgau5uv5ivfgyd.onion snapshot · 2025-03-22 18:45
  • zdkexsh2e7yihw5uhg5hpsgq3dois2m5je7lzfagij2y6iw5ptl35gyd.onion BlackLock snapshot · 2025-12-06 05:09
  • 4ozbomcjurd64vgeblkoqeqirvawi3dddswriw6qespscmequmqlshyd.onion snapshot · 2025-07-04 03:48

Recent victims

The 50 most recent victims claimed by EL-DORADO. Total in the index: 118.

Date listed Victim Description
2025-07-02 oxforduniversal.com Oxford Universal Corp Visitors: 11 Release DATAafter 13days22h 9m 56s …
2025-06-29 nkcustomer.com NK Customer Solutions Visitors: 7 Release DATAafter 13days23h 27m 28s …
2025-06-26 www.ubu.ac.th Ubon Ratchathani University Visitors: 73 Release DATAafter 13days15h 5…
2025-06-25 oliveracanarias.com Olivera Canarias Visitors: 55 Release DATAafter 13days15h 20m 19s Ryan…
2025-06-05 www.rhmc.com.au Ryan Harvie McEnery Visitors: 1 Release DATAafter 6days23h 44m 15s Lum…
2025-06-04 bridgestoneshepparton.com.au Solar City Tyre Service Visitors: 150
2025-06-03 navesinkrehab.com Navesink Rehab Visitors: 6
2025-06-03 solarcity.org Solar City Visitors: 6
2025-06-03 www.lumenation.net Lumenation Visitors: 2 Release DATAafter 6days23h 35m 21s Solar City V…
2025-06-02 riverdellconstruction.com Riverdell Construction Visitors: 1 Release DATAafter 6days23h 54m 38s …
2025-05-30 mcmconstructioninc.com MCM Construction Visitors: 11 Release DATAafter 1day23h 13m 46s Neuros…
2025-05-28 quickframes.com Quick Frames USA Visitors: 9
2025-05-28 www.neurosurgeonsofnewjersey.com Neurosurgeons Visitors: 4 Release DATAafter 4days23h 26m 57s Quick Fra…
2025-05-28 www.laclabichetransport.ca Lac La Biche Transport Visitors: 6 Release DATAafter 0day23h 6m 1s Rel…
2025-05-25 www.reliance-hvac.com Reliance Heating Visitors: 2 Release DATAafter 4days23h 24m 42s TOHO C…
2025-05-16 www.toho.co.jp TOHO CO., LTD. Visitors: 2 Release DATAafter 1day23h 43m 5s Rees NDT I…
2025-03-20 Leave him alone, lol 😀
2025-03-20 Oh, is this your .env file?
2025-03-20 It is not good...
2025-01-23 reesndt.ca Rees NDT Inspection Services Visitors: 323
2025-01-23 www.reesndt.com Rees NDT Inspection Services Visitors: 168 Release DATAafter 1day7h 13…
2025-01-11 evasair.com EVAS Group Visitors: 592 Release DATAafter 12days13h 31m 34s Akantha V…
2025-01-05 akantha.fr Akantha Visitors: 44 Release DATAafter 13 days 21h 9m Perú Controls S.…
2025-01-04 hasa-arg.com HIDROCARBUROS ARGENTINOS S.A. Visitors: 11
2025-01-04 perucontrols.com Perú Controls S.A.C. Visitors: 8 Release DATAafter 12 days 23h 17m HID…
2025-01-04 datascan.com Inventory Management and Counting Solutions Visitors: 11 D&G Enviro-Gr…
2024-12-28 dgenviro.com D&G Enviro-Group Visitors: 20 Relate Infotech Visitors: 1876 LaSen Vis…
2024-12-24 relate-infotech.com Relate Infotech Visitors: 12 LaSen Visitors: 3304 Acumen Group Visitor…
2024-12-16 acumengroup.us Acumen Group Visitors: 37
2024-12-16 lasen.com LaSen Visitors: 20 Acumen Group Visitors: 37 Kandelaar Electrotechniek…
2024-12-14 www.midlandturbo.com Midland Turbo Visitors: 16
2024-12-14 fbchighsprings.org First Baptist Church Visitors: 4
2024-12-14 www.kandelaar.com Kandelaar Electrotechniek Visitors: 6
2024-12-14 www.lightspeeddesign.com Light Speed Design Visitors: 9 Kandelaar Electrotechniek Visitors: 6 F…
2024-11-18 bellstaxservice.com Bells Tax Service Visitors: 14
2024-11-18 tiendascarrion.com Tiendas Carrion & Fernandez Visitors: 19
2024-11-18 www.lalucky.com LA LUCKY Brand Visitors: 12 Tiendas Carrion & Fernandez Visitors: 19 B…
2024-11-18 www.pcafterhours.net PC AfterHours Visitors: 0 Nations Homes Commercial & Residential Const…
2024-11-09 myrtlebeachcustomhomebuilder.com Nations Homes Commercial & Residential Construction South Carolina, Un…
2024-11-08 barranquitas.pr.gov The Municipal Administration of Barranquitas and its Department of Fin…
2024-11-08 seaglesafety.com Eagle Safety Eyewear Visitors: 8
2024-11-08 premierpackaging.com Premier Packaging Visitors: 9
2024-11-08 allianceind.com Alliance Industries, LLC. Visitors: 12
2024-11-08 uccretrievals.com UCC Retrievals, Inc. Visitors: 15
2024-11-08 tankerska.hr ANKERSKA PLOVIDBA d.d. Visitors: 15
2024-11-08 a1mobilelock.com A-1 Mobile Lock & Key Visitors: 15
2024-11-08 auto-recyclers.com A & L Auto Recyclers Visitors: 16
2024-11-08 htetech.com HTE Technologies Visitors: 18
2024-11-08 atd-american.com ATD-American Visitors: 20
2024-11-08 goughconstruction.com Gough Construction Visitors: 24

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.